$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft File: MCcwgVkVGUGrc0xyBhfff9zCQQw.mft (raw, json) Hash identifier: v8rD3F9uEOit1NQ62eK/8U77uTqnXHjRbNeeRk+QzR8= Subject key identifier: 04:26:CA:F5:E0:D7:52:96:BA:8D:78:93:AC:27:37:DF:DB:48:AD:C3 Authority key identifier: 30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C Certificate issuer: /CN=A91D17E8/serialNumber=3027308159151941AB734C720617DF7FDCC2410C Certificate serial: 0FE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft Manifest number: 0FC8 Signing time: Mon 04 Aug 2025 17:42:44 +0000 Manifest this update: Mon 04 Aug 2025 17:42:43 +0000 Manifest next update: Mon 11 Aug 2025 17:42:43 +0000 Files and hashes: 1: MCcwgVkVGUGrc0xyBhfff9zCQQw.crl (hash: JlTFarr0dFS713+Dc2HINpQSYtrP5ymcCspECo9C8/g=) 2: 1777F060A7CE11E980B87114C4F9AE02.roa (hash: HeL3v4bVI9uczPOUq41UBh1VIigK//d/8NJCyMV1Esw=) 3: D8C69E2A5C5511E98C4B6D6BC4F9AE02.roa (hash: jKjjt2VMX2OyaKrGVueLOjhPSZoYcuGJoWMyYUxs8bM=) 4: 35A169488D8611E9B1106E6FC4F9AE02.roa (hash: MIfxKi8mqzy4qfoso9S7UhSd/IeBwSzQBKvFHVpyedo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:42:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4064 (0xfe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17E8, serialNumber=3027308159151941AB734C720617DF7FDCC2410C Validity Not Before: Aug 4 17:42:43 2025 GMT Not After : Aug 11 17:42:43 2025 GMT Subject: CN=6890f114-3890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7e:2d:65:0e:ec:1a:d9:dd:1c:4d:ee:af:59: 44:f4:bc:3b:6e:73:86:73:32:99:27:22:66:25:f4: 98:fb:9e:a8:9a:c3:59:68:37:b8:2e:88:68:25:83: af:fb:e2:98:30:ef:03:58:f2:89:cc:0b:1e:94:62: 97:28:fb:f0:27:58:c3:85:06:0c:07:72:1c:19:4c: 53:7d:bf:e6:49:16:64:81:7b:83:e3:40:33:17:d5: c5:a5:8e:fa:0e:ce:95:53:dc:f5:75:f6:e0:3b:68: ec:d1:84:d4:ba:2f:b4:40:26:72:03:e6:25:73:39: 4d:66:60:6a:1a:eb:2d:02:27:38:ed:ab:9f:e9:36: 66:e1:d1:53:63:d7:9f:bf:60:c6:73:67:24:12:15: 17:34:eb:9d:f0:32:22:41:ee:8c:36:ef:46:55:8f: 52:29:6e:b5:32:ce:84:52:1f:b0:99:db:c9:6d:9e: ec:2a:3c:16:fa:b8:a8:16:b2:93:90:21:0d:73:49: f6:8e:de:69:39:fe:82:54:e8:e9:38:9b:a0:7d:3a: 4e:86:9f:db:77:98:e1:a8:d3:1e:ab:03:15:6f:17: d9:62:5b:f8:cb:95:5e:46:fe:02:61:2d:72:a4:a0: 0e:98:91:c7:08:cf:2d:0a:50:e2:4e:b0:06:01:f5: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:26:CA:F5:E0:D7:52:96:BA:8D:78:93:AC:27:37:DF:DB:48:AD:C3 X509v3 Authority Key Identifier: keyid:30:27:30:81:59:15:19:41:AB:73:4C:72:06:17:DF:7F:DC:C2:41:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MCcwgVkVGUGrc0xyBhfff9zCQQw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17E8/F16E18565C5311E99AB5CF68C4F9AE02/MCcwgVkVGUGrc0xyBhfff9zCQQw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:c6:18:57:f8:4f:24:76:c6:46:e7:1f:12:48:0a:fd:14:9a: 7e:2e:8e:93:b7:d5:9b:39:43:b5:cc:57:73:fd:69:66:9f:92: f5:31:ac:70:1d:cd:fc:c0:9f:61:ed:f5:67:72:51:6c:e0:82: fd:ff:9d:c1:b9:3a:77:0a:15:78:a9:83:57:3b:2b:4f:f6:42: 9d:ce:80:42:b8:c1:24:52:7d:ff:34:22:cd:d6:76:24:fe:3b: 5a:ac:da:5e:bb:69:ba:81:7f:bd:1b:3d:b1:90:ec:0b:22:42: 79:48:a1:52:8f:d1:95:ff:72:97:f8:40:c0:8c:24:06:1a:28: b9:af:b2:ec:e9:c6:00:ac:e2:be:c6:51:6c:c1:25:59:00:fe: 6c:61:d7:ff:a9:0b:70:74:67:72:b1:57:8e:55:73:0c:d8:d0: 87:87:ba:d3:22:c0:b9:a4:d2:1c:92:3e:79:56:fa:ec:f9:9c: 2f:8f:21:f4:7b:19:b8:f0:3b:12:be:c7:9b:92:56:a8:90:c1: 1c:c6:3a:4b:aa:3e:42:5d:94:71:d7:a5:ee:c2:9f:e1:37:cb: cb:94:f3:18:a1:94:0b:2f:1a:04:ab:85:20:1e:54:32:67:f3: 9b:8b:83:31:59:b4:76:10:60:ce:e8:6f:5e:f1:19:84:42:c2: c4:b9:d0:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD+AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RTgxMTAvBgNVBAUTKDMwMjczMDgxNTkxNTE5NDFBQjczNEM3MjA2MTdERjdG RENDMjQxMEMwHhcNMjUwODA0MTc0MjQzWhcNMjUwODExMTc0MjQzWjAYMRYwFAYD VQQDEw02ODkwZjExNC0zODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv34tZQ7sGtndHE3ur1lE9Lw7bnOGczKZJyJmJfSY+56omsNZaDe4LohoJYOv ++KYMO8DWPKJzAselGKXKPvwJ1jDhQYMB3IcGUxTfb/mSRZkgXuD40AzF9XFpY76 Ds6VU9z1dfbgO2js0YTUui+0QCZyA+YlczlNZmBqGustAic47auf6TZm4dFTY9ef v2DGc2ckEhUXNOud8DIiQe6MNu9GVY9SKW61Ms6EUh+wmdvJbZ7sKjwW+rioFrKT kCENc0n2jt5pOf6CVOjpOJugfTpOhp/bd5jhqNMeqwMVbxfZYlv4y5VeRv4CYS1y pKAOmJHHCM8tClDiTrAGAfW04wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAQmyvXg 11KWuo14k6wnN9/bSK3DMB8GA1UdIwQYMBaAFDAnMIFZFRlBq3NMcgYX33/cwkEM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdFOC9GMTZFMTg1NjVD NTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdVR3JjMHh5QmhmZmY5ekNR UXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01DY3dnVmtWR1VHcmMweHlCaGZmZjl6Q1FRdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MTdFOC9GMTZFMTg1NjVDNTMxMUU5OUFCNUNGNjhDNEY5QUUwMi9NQ2N3Z1ZrVkdV R3JjMHh5QmhmZmY5ekNRUXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHxhhX+E8kdsZG5x8SSAr9FJp+Lo6Tt9WbOUO1zFdz/Wlmn5L1Maxw Hc38wJ9h7fVnclFs4IL9/53BuTp3ChV4qYNXOytP9kKdzoBCuMEkUn3/NCLN1nYk /jtarNpeu2m6gX+9Gz2xkOwLIkJ5SKFSj9GV/3KX+EDAjCQGGii5r7Ls6cYArOK+ xlFswSVZAP5sYdf/qQtwdGdysVeOVXMM2NCHh7rTIsC5pNIckj55Vvrs+ZwvjyH0 exm48DsSvsebklaokMEcxjpLqj5CXZRx16Xuwp/hN8vLlPMYoZQLLxoEq4UgHlQy Z/Obi4MxWbR2EGDO6G9e8RmEQsLEudAL -----END CERTIFICATE-----Generated at Wed Aug 6 13:03:13 2025 by rpki-client